Security Research
Microsoft released its monthly set of security updates to address the vulnerabilities in its products today. The number of vulnerabilities reported each month has come up again after the dip from last October. There are 77 vulnerabilities reported with 20 CVEs rated critical and 51 CVEs rated important. These updates have addressed the issues in […]
Read More →Microsoft released its monthly set of security updates to address the vulnerabilities in its products today. There are 49 vulnerabilities with 7 rated critical for Remote Code Execution , 40 rated important and 2 rated moderate in severity. These updates have addressed the issues in Adobe Flash Player, Internet Explorer, Microsoft Edge, Microsoft Windows, Microsoft Office, […]
Read More →Spectre and Meltdown vulnerabilities are one of the most significant known hardware vulnerabilities that affect the modern computer processors. Meltdown and Spectre vulnerabilities were exploited through malicious programs to retrieve secrets stored in the memory of other running programs, sensitive information like passwords. Both ‘Meltdown’ and ‘Spectre’ make use of a feature in the processor […]
Read More →Microsoft released its monthly set of security updates to address the vulnerabilities in its products today. There are 39 vulnerabilities listed with 9 rated critical and 30 rated important in severity. These updates have addressed the issues in Adobe Flash Player, Internet Explorer, Microsoft Edge, Microsoft Windows, Microsoft Office, ChakraCore, .NET Framework, etc. Zero-day attacks Two […]
Read More →Image Source: wikimedia.org Apple released a set of security updates for its products this month. There are ten products which received the updates including Apple’s new brain child, MacOS Mojave which was newly launched in September. This update addresses a set of 26 vulnerabilities. And, the products listed under this update are macOS Mojave 10.14.2, […]
Read More →January 2018 saw the rise of Meltdown and Spectre vulnerabilities concerning speculative execution side channels. A subclass of speculative execution side-channel vulnerability, termed as Speculative Store Bypass (SSB) was announced by Microsoft in collaboration with Google researchers, and was assigned CVE-2018-3639. While Microsoft released several updates as a fix to this vulnerability, some additional measures […]
Read More →